Acceptable Use Policy

01

Purpose of This Policy

This Acceptable Use Policy ("AUP") defines how you may and may not use VibeClear's security audit services. By using our services, you agree to this policy in full.

Security tools carry inherent responsibility. Scanning infrastructure without authorization is illegal in most jurisdictions — including under the Computer Fraud and Abuse Act (CFAA) in the US, the Computer Misuse Act in the UK, and equivalent laws worldwide. This policy ensures VibeClear is used only for its intended purpose: helping people secure their own applications.

02

Permitted & Prohibited Uses

✓ Allowed

Scan your own web application
Scan a client's app with their written consent
Scan a staging or dev environment you control
Scan an open-source project you maintain
Scan a recently acquired app you now own
Scan an employer's app as an authorized employee
Use your report to improve your own app's security
Share your report internally with your team

✗ Not Allowed

Scan any app you don't own or aren't authorized to test
Scan competitor applications
Scan government or critical infrastructure systems
Scan applications to facilitate an attack
Resell or redistribute your report as a third-party certification
Use our service for competitive intelligence
Submit fake or misleading information in your intake form
Attempt to reverse-engineer our scanning methodology

03

Authorization Requirement

You must have one of the following before submitting a URL:

Ownership: You are the registered owner of the domain and application
Written authorization: The application owner has provided explicit written permission (email is sufficient)
Employment authorization: You are an employee or contractor of the organization that owns the app, authorized to conduct security testing
Contractual authorization: You are a security professional engaged under an agreement that explicitly authorizes security assessment

⚠️ Verbal authorization is not sufficient. "I think they wouldn't mind" is not authorization. If you are unsure whether you have authorization, you do not have authorization. Scanning without clear authorization violates this policy, our Terms of Service, and potentially criminal law in your jurisdiction.

04

Prohibited Activities

The following are strictly prohibited and will result in immediate termination, forfeiture of payment, and may be reported to law enforcement:

Unauthorized Scanning

Submitting URLs belonging to applications you don't own or aren't authorized to assess
Scanning competitors' applications for any purpose
Scanning government, military, or critical infrastructure systems
Scanning financial institutions or healthcare systems without explicit authorization

Malicious Use

Using findings to attack, exploit, or gain unauthorized access to any system
Sharing your report's findings with parties who may use them maliciously
Using our service as reconnaissance prior to an attack

Misrepresentation

Providing false information about your identity, authorization, or the nature of the app
Representing our report as a formal penetration test or compliance certification to third parties
Misrepresenting findings to investors, regulators, or customers

Platform Abuse

Attempting to reverse-engineer or probe our scanning infrastructure
Submitting automated requests or attempting to abuse our service at scale
Harassing or threatening VibeClear staff

05

Consequences of Violation

Immediate service termination with no refund
Permanent ban from VibeClear services
Reporting to law enforcement where violations constitute criminal activity
Civil liability — you agree to indemnify VibeClear for losses, legal costs, and damages arising from your violation
Notification to affected parties where required by law

06

Reporting Violations & Responsible Disclosure

If you believe someone is using VibeClear to scan your application without authorization, contact us immediately at hello@vibeclear.ai with the subject "AUP Violation Report." We investigate promptly and will cooperate fully with any legal action you choose to pursue.

For security researchers: If you've discovered a vulnerability in VibeClear's own infrastructure, please disclose it responsibly to hello@vibeclear.ai. We respond within 48 hours and appreciate responsible disclosure.

07

Updates to This Policy

We may update this AUP as our services evolve or new misuse patterns emerge. Material changes will be communicated via email and posted here with an updated effective date. Questions? Contact hello@vibeclear.ai.